CommandCenter Secure Gateway
Administrators Guide
Release 9.5
Copyright © 2020 Raritan, Inc.
CCA
-0X-v9.5-E
December 2020
255-80-5140-00-0X
This document contains proprietary information that is protected by copyright. All rights reserved. No part of
this document may be photocopied, reproduced, or translated into another language without express prior
written consent of Raritan, Inc.
© Copyright 2020 Raritan, Inc. All third-party software and hardware mentioned in this document are
registered trademarks or trademarks of and are the property of their respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a commercial installation. This equipment generates, uses, and can radiate radio frequency
energy and if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications. Operation of this equipment in a residential environment may cause harmful
interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not arising
under normal operating conditions.
If a power cable is included with this product, it must be used exclusively for this product.
iii
Contents
What's New in the CC-SG Administrators Help xviii
Introduction 1
Terminology/Acronyms ................................................................................................................................ 2
Client Browser Requirements....................................................................................................................... 4
Accessing CC-SG 5
CC-SG Admin Client Using a Browser ........................................................................................................... 5
JRE Incompatibility ............................................................................................................................ 6
CC-SG Desktop Admin Clients....................................................................................................................... 6
Windows Desktop Admin Client........................................................................................................ 7
Mac Desktop Admin Client ................................................................................................................ 9
Linux Desktop Admin Client ............................................................................................................ 10
CC-SG Admin Client Overview .................................................................................................................... 12
CC-SG Access Client Using a Browser ......................................................................................................... 14
Thick Client ................................................................................................................................................. 14
Install the Thick Client ..................................................................................................................... 14
Use the Thick Client ......................................................................................................................... 15
Getting Started 16
Licensing ..................................................................................................................................................... 16
Getting, Installing, and Checking Out Licenses ............................................................................... 17
Cluster Kit Licensing ........................................................................................................................ 18
Find Your Host ID and Check Number of Nodes In Database.......................................................... 19
Available Licenses ........................................................................................................................... 19
Install or Upgrade VMware Tools ............................................................................................................... 20
Configure Backups and Snapshots of Virtual Appliance and Storage Servers ............................................ 21
Virtual Appliances with Remote Storage Servers ....................................................................................... 21
Confirming IP Address ................................................................................................................................ 21
Log in to Diagnostic Console to Set CC-SG IP Address ................................................................................ 21
Default CC-SG Settings .................................................................................................................... 22
Contents
iv
Log in to CC-SG ........................................................................................................................................... 22
Setting CC-SG Server Time .......................................................................................................................... 22
Checking the Compatibility Matrix ............................................................................................................. 23
Checking and Upgrading Application Versions ........................................................................................... 23
Configuring CC-SG with Guided Setup 25
Before You Use Guided Setup .................................................................................................................... 25
Associations in Guided Setup ..................................................................................................................... 26
Create Categories and Elements ..................................................................................................... 26
Device Setup ............................................................................................................................................... 27
Discover and Add Devices ............................................................................................................... 27
Creating Groups.......................................................................................................................................... 29
Add Device Groups and Node Groups ............................................................................................. 29
User Management ...................................................................................................................................... 31
Add User Groups and Users ............................................................................................................ 31
Associations, Categories, and Elements 33
About Associations ..................................................................................................................................... 33
Association Terminology ................................................................................................................. 33
Associations - Defining Categories and Elements ........................................................................... 33
How to Create Associations ............................................................................................................ 34
Adding, Editing, and Deleting Categories and Elements ............................................................................ 34
Add a Category ................................................................................................................................ 34
Delete a Category ............................................................................................................................ 35
Add an Element ............................................................................................................................... 35
Adding Categories and Elements with CSV File Import .............................................................................. 35
Categories and Elements CSV File Requirements ........................................................................... 36
Sample Categories and Elements CSV File ...................................................................................... 37
Import Categories and Elements ..................................................................................................... 37
Export Categories and Elements ..................................................................................................... 37
Devices, Device Groups, and Ports 39
Viewing Devices .......................................................................................................................................... 40
Device and Port Icons ...................................................................................................................... 40
Port Sorting Options ........................................................................................................................ 41
Device Profile Screen ...................................................................................................................... 42
Topology View ................................................................................................................................. 43
Right Click Options in the Devices Tab ............................................................................................ 44
Searching for Devices ................................................................................................................................. 44
Wildcards for Search ....................................................................................................................... 44
Wildcard Examples .......................................................................................................................... 44
Discovering and Adding IPv6 Network Devices .......................................................................................... 45
Configure the DNS Server to Listen on IPv6 .................................................................................... 45
Contents
v
Discovering Devices .................................................................................................................................... 46
Discovering SX2 Devices .................................................................................................................. 47
Adding a Device .......................................................................................................................................... 47
Add a KVM or Serial Device ............................................................................................................. 48
Add a PowerStrip Device ................................................................................................................. 50
Add a Dominion PX Device .............................................................................................................. 50
Add a Raritan PX iPDU Device ......................................................................................................... 52
Add a ServerTech PDU or ServerTech PRO3X ................................................................................. 53
Adding a Device by Hostname ........................................................................................................ 55
Adding SX2 by Hostname ................................................................................................................ 55
Adding a KX3 or KX4-101 Device with DSAM ............................................................................................. 56
Editing a Device .......................................................................................................................................... 57
Change the HTTP and HTTPS Ports for a Device ......................................................................................... 57
Editing a PowerStrip Device or a Dominion PX Device ............................................................................... 58
Adding Notes to a Device Profile ................................................................................................................ 58
Adding Location and Contacts to a Device Profile ...................................................................................... 59
Deleting a Device ........................................................................................................................................ 59
Certificates for IPv6 Enabled KX II Devices ................................................................................................. 60
Configuring Ports ........................................................................................................................................ 60
Configure a Serial Port .................................................................................................................... 60
Configure a KVM Port ...................................................................................................................... 61
Nodes Created by Configuring Ports ............................................................................................... 62
Editing a Port .............................................................................................................................................. 62
Deleting a Port ............................................................................................................................................ 64
Configuring a Blade Chassis Device Connected to KX2 or KX3 ................................................................... 64
Blade Chassis Overview ................................................................................................................... 64
Add a Blade Chassis Device ............................................................................................................. 65
Edit a Blade Chassis Device ............................................................................................................. 68
Delete a Blade Chassis Device ......................................................................................................... 68
Move a Blade Chassis Device to a Different Port ............................................................................ 69
Restore Blade Servers Ports to Normal KX2/KX3 Ports .............................................................................. 69
Bulk Copying for Device Associations, Location and Contacts ................................................................... 70
Configuring Analog KVM Switches Connected to KX2 or KX3 .................................................................... 70
Add a KVM Switch Connected to KX2 or KX3 .................................................................................. 71
Configuring Ports on an Analog KVM Switch Device Connected to KX2 or KX3 .............................. 71
Device Group Manager .............................................................................................................................. 72
Device Groups Overview ................................................................................................................. 73
Add a Device Group ........................................................................................................................ 74
Edit a Device Group ......................................................................................................................... 77
Delete a Device Group .................................................................................................................... 77
Adding and Deleting Devices with CSV File Import .................................................................................... 78
Devices CSV File Requirements ....................................................................................................... 78
Sample Devices CSV File .................................................................................................................. 83
Import Devices CSV File ................................................................................................................... 84
Export Devices CSV File ................................................................................................................... 84
Contents
vi
Upgrading a Device..................................................................................................................................... 84
Backing Up a Device Configuration ............................................................................................................ 85
Restoring Device Configurations ................................................................................................................ 86
Restore a Device Configuration for SX ............................................................................................ 86
Restore All Configuration Data Except Network Settings to a KX4-101, KX3, KX2, KSX2, , SX2, or
KX2-101-V2 Device .......................................................................................................................... 86
Restore Only Device Settings or User and User Group Data to a KX3, KX2, KSX2, SX2, or
KX2-101-V2 Device .......................................................................................................................... 87
Restore All Configuration Data to a KX4-101, KX3, KX2, KSX2, SX2, or KX2-101-V2 Device ............ 87
Save, Upload, and Delete Device Backup Files ................................................................................ 88
Copying Device Configuration .................................................................................................................... 89
Restarting a Device ..................................................................................................................................... 90
Pinging a Device ......................................................................................................................................... 90
Pausing CC-SG's Management of a Device ................................................................................................. 90
Resuming Management of a Device ........................................................................................................... 91
Pause and Resume Management of Devices Using a Scheduled Task ....................................................... 91
Device Power Manager .............................................................................................................................. 92
Launching a Device's Administrative Page ................................................................................................. 92
Disconnecting Users ................................................................................................................................... 93
Managed Powerstrips 94
Configuring Powerstrips that are Managed by Another Device in CC-SG .................................................. 95
Configuring PowerStrips Connected to KX3, KX2, KX2-101-V2, KSX2, and SX2 .......................................... 95
Add a PowerStrip Device Connected to a KX3, KX2, KX2-101-V2, KSX2, or SX2 Device .................. 96
Move a KX3, KX2, KX2-101-V2, KSX2, or SX2's PowerStrip to a Different Port ............................... 96
Delete a PowerStrip Connected to a KX3, KX2, KX2-101-V2, KSX2, or SX2 Device ......................... 96
Configuring Outlets on a Powerstrip .......................................................................................................... 96
Nodes, Node Groups, and Interfaces 98
Nodes and Interfaces Overview ................................................................................................................. 98
About Nodes ................................................................................................................................... 98
Node Names .................................................................................................................................... 99
About Interfaces .............................................................................................................................. 99
Viewing Nodes ............................................................................................................................................ 99
Nodes Tab ..................................................................................................................................... 100
Node Profile .................................................................................................................................. 101
Node and Interface Icons .............................................................................................................. 102
Service Accounts ...................................................................................................................................... 103
Service Accounts Overview ........................................................................................................... 103
Add, Edit, and Delete Service Accounts ........................................................................................ 103
Change the Password for a Service Account ................................................................................. 104
Assign Service Accounts to Interfaces ........................................................................................... 105
Adding, Editing, and Deleting Nodes ........................................................................................................ 105
Add a Node .................................................................................................................................... 105
Nodes Created by Configuring Ports ............................................................................................. 107
Edit a Node .................................................................................................................................... 107
Contents
vii
Delete a Node ............................................................................................................................... 107
Adding Location and Contacts to a Node Profile ...................................................................................... 108
Adding Notes to a Node Profile ................................................................................................................ 108
Configuring the Virtual Infrastructure in CC-SG ....................................................................................... 109
Terminology for Virtual Infrastructure .......................................................................................... 110
Add a Control System with Virtual Hosts and Virtual Machines ................................................... 110
Add a Virtual Host with Virtual Machines ..................................................................................... 114
Edit Control Systems, Virtual Hosts, and Virtual Machines ........................................................... 116
Delete Control Systems and Virtual Hosts .................................................................................... 118
Delete a Virtual Machine Node ..................................................................................................... 119
Delete a Virtual Infrastructure ...................................................................................................... 119
Minimum Permissions Required in VCenter ................................................................................. 119
Add the CC-SG IP Address to Internet Explorer Trusted Sites Internet Zone ................................ 120
Install the VMware Remote Console Plugin Manually When VCenter is Not Added .................... 120
Add an IPv6 VCenter Accessed Across VPN .................................................................................. 120
Accessing VI Client from a Linux Client ......................................................................................... 121
Synchronizing the Virtual Infrastructure with CC-SG ............................................................................... 121
Synchronize the Virtual Infrastructure .......................................................................................... 121
Enable or Disable Daily Synchronization of the Virtual Infrastructure.......................................... 122
Reboot or Force Reboot a Virtual Host Node ........................................................................................... 122
Accessing the Virtual Topology View........................................................................................................ 123
Connecting to a Node ............................................................................................................................... 123
Firefox Users of the Access Client Must Download JNLP File........................................................ 124
Pinging a Node.......................................................................................................................................... 124
Adding, Editing, and Deleting Interfaces .................................................................................................. 125
Add an Interface ............................................................................................................................ 125
Edit an Interface ............................................................................................................................ 139
Delete an Interface........................................................................................................................ 140
Adding Interfaces for Nodes Using IPv6 ................................................................................................... 140
Configuring Direct Port Access to a Node ................................................................................................ 140
Bulk Copying for Node Associations, Location and Contacts ................................................................... 141
Using Chat ................................................................................................................................................ 141
Adding, Updating, and Deleting Nodes with CSV File Import................................................................... 142
Add Nodes CSV File Requirements ................................................................................................ 143
Update Nodes CSV File Requirements .......................................................................................... 154
Delete Nodes CSV File Requirements............................................................................................ 163
Sample Nodes CSV File .................................................................................................................. 164
Import Nodes ................................................................................................................................ 165
Export Nodes ................................................................................................................................. 165
Adding, Editing, and Deleting Node Groups ............................................................................................. 166
Node Groups Overview ................................................................................................................. 166
Add a Node Group ......................................................................................................................... 166
Edit a Node Group ......................................................................................................................... 170
Delete a Node Group .................................................................................................................... 170
Contents
viii
Users and User Groups 171
The Users Tab ........................................................................................................................................... 171
Default User Groups ................................................................................................................................. 172
CC Super-User Group .................................................................................................................... 172
System Administrators Group ....................................................................................................... 172
CC Users Group ............................................................................................................................. 172
Adding, Editing, and Deleting User Groups .............................................................................................. 173
Add a User Group .......................................................................................................................... 173
Edit a User Group .......................................................................................................................... 175
Delete a User Group ...................................................................................................................... 176
Limit the Number of KVM Sessions per User ........................................................................................... 177
Configuring Access Auditing for User Groups .......................................................................................... 177
Adding, Editing, and Deleting Users ......................................................................................................... 178
Add a User ..................................................................................................................................... 178
Edit a User ..................................................................................................................................... 180
Delete a User ................................................................................................................................. 180
Configure User SSH Keys ............................................................................................................... 181
Assigning a User to a Group ..................................................................................................................... 182
Deleting a User From a Group .................................................................................................................. 183
Adding Users with CSV File Import ........................................................................................................... 183
Users CSV File Requirements ........................................................................................................ 184
Sample Users CSV File ................................................................................................................... 187
Import Users.................................................................................................................................. 187
Export Users .................................................................................................................................. 188
Your User Profile ...................................................................................................................................... 188
Change your password .................................................................................................................. 189
Change your name ........................................................................................................................ 189
Change your default search preference ........................................................................................ 189
Change the CC-SG default font size ............................................................................................... 189
Change your email address ........................................................................................................... 189
Change the CC-SG Super User's Username ................................................................................... 190
Contents
ix
Logging Users Out..................................................................................................................................... 190
Bulk Copying Users ................................................................................................................................... 190
Policies for Access Control 192
Adding a Policy ......................................................................................................................................... 193
Editing a Policy ......................................................................................................................................... 194
Deleting a Policy ....................................................................................................................................... 195
Support for Virtual Media ........................................................................................................................ 195
Assigning Policies To User Groups ............................................................................................................ 196
Custom Views for Devices and Nodes 197
Types of Custom Views............................................................................................................................. 197
View by Category .......................................................................................................................... 197
Filter by Node Group ..................................................................................................................... 197
Filter by Device Group ................................................................................................................... 197
Using Custom Views in the Admin Client ................................................................................................. 198
Custom Views for Nodes ............................................................................................................... 198
Custom Views for Devices ............................................................................................................. 200
Remote Authentication and Authorization 204
Authentication and Authorization (AA) Overview .................................................................................... 204
Flow for Authentication and Authorization .................................................................................. 204
User Accounts ............................................................................................................................... 205
Distinguished Names for LDAP and AD .................................................................................................... 205
Specify a Distinguished Name for AD ............................................................................................ 205
Specify a Distinguished Name for LDAP ........................................................................................ 205
Specify a Username for AD ........................................................................................................... 206
Specify a Base DN .......................................................................................................................... 206
Specifying Modules for Authentication and Authorization ...................................................................... 206
Establishing Order of External AA Servers ................................................................................................ 206
AD and CC-SG Overview ........................................................................................................................... 207
Adding an AD Module to CC-SG ............................................................................................................... 207
AD General Settings ...................................................................................................................... 208
AD Advanced Settings ................................................................................................................... 209
AD Group Settings ......................................................................................................................... 210
AD Trust Settings ........................................................................................................................... 211
Editing an AD Module ............................................................................................................................... 211
Importing AD User Groups ....................................................................................................................... 212
Synchronizing AD with CC-SG ................................................................................................................... 213
Synchronize All User Groups with AD ........................................................................................... 214
Synchronize All AD Modules ......................................................................................................... 214
Enable or Disable Daily Synchronization of All AD Modules ......................................................... 215
Change the Daily AD Synchronization Time .................................................................................. 215
Contents
x
Renaming and Moving AD Groups ........................................................................................................... 216
About LDAP and CC-SG ............................................................................................................................. 216
Add an LDAP (Netscape) Module to CC-SG .............................................................................................. 216
LDAP General Settings ................................................................................................................... 216
LDAP Advanced Settings ............................................................................................................... 217
Sun One LDAP (iPlanet) Configuration Settings ............................................................................ 218
OpenLDAP (eDirectory) Configuration Settings ............................................................................ 218
IBM LDAP Configuration Settings .................................................................................................. 219
About TACACS+ and CC-SG ....................................................................................................................... 219
Add a TACACS+ Module ............................................................................................................................ 220
TACACS+ General Settings............................................................................................................. 220
About RADIUS and CC-SG ......................................................................................................................... 220
Add a RADIUS Module .............................................................................................................................. 220
RADIUS General Settings ............................................................................................................... 221
Two-Factor Authentication Using RADIUS .................................................................................... 221
Setup SSO with Integrated Windows Authentication .............................................................................. 221
Requirements and Support for SSO with IWA............................................................................... 221
Configuring SSO with IWA ............................................................................................................. 222
Troubleshooting for SSO with IWA ............................................................................................... 223
Reports 224
Using Reports ........................................................................................................................................... 224
Sort Report Data ........................................................................................................................... 224
Resize Report Column Width ........................................................................................................ 224
View Report Details ....................................................................................................................... 225
Navigate Multiple Page Reports.................................................................................................... 225
Print a Report ................................................................................................................................ 225
Save a Report to a File ................................................................................................................... 225
Purge a Report's Data From CC-SG ............................................................................................... 226
Hide or Show Report Filters .......................................................................................................... 226
IP Addresses in Reports ................................................................................................................. 226
Contents
xi
Audit Trail Report ..................................................................................................................................... 226
Error Log Report ....................................................................................................................................... 227
Access Report ........................................................................................................................................... 228
Availability Report .................................................................................................................................... 229
Active Users Report .................................................................................................................................. 229
Locked Out Users Report .......................................................................................................................... 229
All Users Data Report ............................................................................................................................... 229
User Group Data Report ........................................................................................................................... 230
Device Asset Report ................................................................................................................................. 230
Device Group Data Report........................................................................................................................ 231
Query Port Report .................................................................................................................................... 231
Node Asset Report ................................................................................................................................... 232
Active Nodes Report ................................................................................................................................. 233
Node Creation Report .............................................................................................................................. 233
Node Group Data Report .......................................................................................................................... 234
AD User Group Report .............................................................................................................................. 234
Scheduled Reports.................................................................................................................................... 234
Upgrade Device Firmware Report ............................................................................................................ 235
Advanced Administration 236
Configuring a Message of the Day ............................................................................................................ 236
Configuring Applications for Accessing Nodes ......................................................................................... 237
Checking and Upgrading Application Versions ............................................................................. 237
Older Version of Application Opens After Upgrading ................................................................... 238
Add an Application ........................................................................................................................ 238
Delete an Application .................................................................................................................... 238
Prerequisites for Using AKC .......................................................................................................... 239
Configuring Default Applications .............................................................................................................. 239
View the Default Application Assignments ................................................................................... 239
Set the Default Application for an Interface or Port Type ............................................................ 239
Launching HTML KVM Client for KX3 3.4 and higher .................................................................... 240
Managing Device Firmware ...................................................................................................................... 240
Upload Firmware ........................................................................................................................... 241
Delete Firmware ............................................................................................................................ 241
Configuring the CC-SG Network ............................................................................................................... 241
About Network Setup.................................................................................................................... 241
About CC-SG LAN Ports ................................................................................................................. 242
What is IP Failover mode? ............................................................................................................. 243
What is IP Isolation mode? ........................................................................................................... 245
Recommended DHCP Configurations for CC-SG ........................................................................... 247
Support for IPv6 ............................................................................................................................ 248
Register CC-SG Hostname to IP Address in DNS ........................................................................... 248
Configuring Logging Activity ..................................................................................................................... 248
Purge CC-SG's Internal Log ............................................................................................................ 249
Log Severity Level Examples .......................................................................................................... 249
Contents
xii
Configuring the CC-SG Server Time and Date .......................................................................................... 249
Connection Modes: Direct and Proxy ....................................................................................................... 250
About Connection Modes ............................................................................................................. 250
Configure Direct Mode for All Client Connections ........................................................................ 251
Configure Proxy Mode for All Client Connections ......................................................................... 251
Configure a Combination of Direct Mode and Proxy Mode .......................................................... 251
Device Settings ......................................................................................................................................... 252
Enable AKC Download Server Certificate Validation ..................................................................... 254
Configuring Custom JRE Settings .............................................................................................................. 254
Configuring SNMP .................................................................................................................................... 255
Configure SNMP Agents ................................................................................................................ 255
Configure SNMP Traps and Notifications ...................................................................................... 256
Configuring CC-SG Clusters ....................................................................................................................... 258
Requirements for CC-SG Clusters .................................................................................................. 258
Access a CC-SG Cluster .................................................................................................................. 258
Cluster Status ................................................................................................................................ 258
Create a Cluster ............................................................................................................................. 259
Remove Secondary CC-SG Node ................................................................................................... 260
Configure Cluster Settings ............................................................................................................. 260
Switch the Primary and Secondary Node Status ........................................................................... 260
Recover a Cluster .......................................................................................................................... 261
Delete a Cluster ............................................................................................................................. 261
Upgrade a Cluster .......................................................................................................................... 262
Cluster Licenses ............................................................................................................................. 262
Configuring a Neighborhood .................................................................................................................... 263
Create a Neighborhood ................................................................................................................. 263
Edit a Neighborhood ..................................................................................................................... 264
Refresh a Neighborhood ............................................................................................................... 267
Certificate Requirements for Neighborhoods ............................................................................... 267
Delete a Neighborhood ................................................................................................................. 267
Upgrade a Neighborhood .............................................................................................................. 268
Security Manager ..................................................................................................................................... 268
Remote Authentication ................................................................................................................. 268
AES Encryption .............................................................................................................................. 268
Configure SSL or TLS Browser Connection Protocol ...................................................................... 270
Login Settings ................................................................................................................................ 270
Configure the Inactivity Timer ....................................................................................................... 273
Portal ............................................................................................................................................. 274
Certificates .................................................................................................................................... 275
Access Control List ........................................................................................................................ 278
Notification Manager ............................................................................................................................... 279
Configure an External SMTP Server .............................................................................................. 279
Task Manager ........................................................................................................................................... 280
Task Types ..................................................................................................................................... 280
Schedule Sequential Tasks ............................................................................................................ 280
Email Notifications for Tasks ......................................................................................................... 281
Scheduled Reports ........................................................................................................................ 281
Find and View Tasks ...................................................................................................................... 281
Schedule a Task ............................................................................................................................. 281
Contents
xiii
Schedule a Device Firmware Upgrade .......................................................................................... 284
Change a Scheduled Task .............................................................................................................. 285
Reschedule a Task ......................................................................................................................... 285
Schedule a Task that is Similar to Another Task ............................................................................ 286
Delete a Task ................................................................................................................................. 286
SSH Access to CC-SG ................................................................................................................................. 286
Enable SSH Access ......................................................................................................................... 287
Get Help for SSH Commands ......................................................................................................... 288
SSH Commands and Parameters ................................................................................................... 289
Command Tips .............................................................................................................................. 291
Create an SSH Connection to a Serial-Enabled Device .................................................................. 292
Use SSH to Connect to a Node via a Serial Out-of-Band Interface ................................................ 292
End SSH Connections .................................................................................................................... 294
Direct Port Access to Dominion SX Serial Targets ......................................................................... 294
Serial Admin Port ...................................................................................................................................... 298
About Terminal Emulation Programs ............................................................................................ 298
Finding Your CC-SG Serial Number ................................................................................................ 298
Web Services API ...................................................................................................................................... 299
CC-NOC ..................................................................................................................................................... 300
System Maintenance 301
Maintenance Mode .................................................................................................................................. 301
Scheduled Tasks and Maintenance Mode .................................................................................... 301
Entering Maintenance Mode ................................................................................................................... 302
Exiting Maintenance Mode ...................................................................................................................... 302
Backing Up CC-SG ..................................................................................................................................... 302
What is the difference between Full backup and Standard backup? ........................................... 304
Saving and Deleting Backup Files ............................................................................................................. 304
Save a Backup File ......................................................................................................................... 304
Delete a Backup File ...................................................................................................................... 304
Restoring CC-SG ........................................................................................................................................ 305
Resetting CC-SG ........................................................................................................................................ 306
Restarting CC-SG ....................................................................................................................................... 308
Upgrading CC-SG ...................................................................................................................................... 309
Fence Releases and Upgrade Paths............................................................................................... 311
Upgrade Failure Messages ............................................................................................................ 311
Clear the Browser's Cache............................................................................................................. 311
Clear the Java Cache ..................................................................................................................... 312
Upgrading a Cluster .................................................................................................................................. 312
Primary Node Upgrade Failure ...................................................................................................... 313
Migrating a CC-SG Database ..................................................................................................................... 313
Requirements for Migration ......................................................................................................... 313
Migrate a CC-SG Database ............................................................................................................ 313
Contents
xiv
CC-SG Shutdown ....................................................................................................................................... 314
Restarting CC-SG after Shutdown ............................................................................................................. 315
Powering Down CC-SG ............................................................................................................................. 315
Ending CC-SG Session ............................................................................................................................... 315
Log Out of CC-SG ........................................................................................................................... 315
Exit CC-SG ...................................................................................................................................... 316
Diagnostic Console 317
Accessing Diagnostic Console ................................................................................................................... 317
Access Diagnostic Console via VGA/Keyboard/Mouse Port .......................................................... 317
Access Diagnostic Console via SSH ................................................................................................ 317
Status Console .......................................................................................................................................... 318
About Status Console .................................................................................................................... 318
Access Status Console ................................................................................................................... 318
Status Console Information ........................................................................................................... 319
Administrator Console .............................................................................................................................. 324
Access Administrator Console ....................................................................................................... 324
Navigate Administrator Console ................................................................................................... 326
Edit Diagnostic Console Configuration .......................................................................................... 327
Edit Network Interfaces Configuration (Network Interfaces) ....................................................... 328
Edit IPv6 Network Interfaces Configuration .................................................................................. 329
Ping an IP Address ......................................................................................................................... 330
Use Traceroute .............................................................................................................................. 331
Edit Static Routes .......................................................................................................................... 332
View Log Files in Diagnostic Console ............................................................................................. 334
Restart CC-SG with Diagnostic Console ......................................................................................... 337
Reboot CC-SG with Diagnostic Console ......................................................................................... 338
Power Off CC-SG System from Diagnostic Console ....................................................................... 339
Reset CC Super-User Password with Diagnostic Console .............................................................. 340
Reset CC-SG Factory Configuration ............................................................................................... 342
Diagnostic Console Password Settings .......................................................................................... 344
Diagnostic Console Account Configuration ................................................................................... 345
Configure Remote System Monitoring .......................................................................................... 347
Display Historical Data Trending Reports ...................................................................................... 348
Display RAID Status and Disk Utilization ....................................................................................... 349
Perform Disk or RAID Tests ........................................................................................................... 350
Schedule Disk Tests ....................................................................................................................... 352
Repair or Rebuild RAID Disks ......................................................................................................... 353
View Top Display with Diagnostic Console .................................................................................... 355
Check Disk Status .......................................................................................................................... 355
Display NTP Status......................................................................................................................... 356
Take a System Snapshot ................................................................................................................ 357
Change the Video Resolution for Diagnostic Console ................................................................... 359
Contents
xv
Power IQ Integration 360
Power Control of Power IQ IT Devices ..................................................................................................... 360
Configuring Power IQ Services ...................................................................................................... 361
Configuring Power Control of Power IQ IT Devices ....................................................................... 362
Configuring Synchronization of Power IQ and CC-SG ............................................................................... 363
Synchronize Power IQ and CC-SG.................................................................................................. 364
Power IQ Synchronization Policies ................................................................................................ 364
Importing and Exporting Dominion PX Data from Power IQ .................................................................... 365
Import Power Strips from Power IQ .............................................................................................. 365
Export Dominion PX Data to Use in Power IQ ............................................................................... 367
Specifications for V1 and E1 368
V1 Model .................................................................................................................................................. 368
V1 General Specifications.............................................................................................................. 368
V1 Environmental Requirements .................................................................................................. 368
E1 Model .................................................................................................................................................. 369
E1 General Specifications .............................................................................................................. 369
E1 Environmental Requirements .................................................................................................. 369
LEDs on E1 Model Units ................................................................................................................ 370
Sonic Alarm and Red LEDs on E1 Model Units .............................................................................. 370
CC-SG and Network Configuration 372
Required Open Ports for CC-SG Networks: Executive Summary .............................................................. 372
CC-SG Communication Channels .............................................................................................................. 373
CC-SG and Raritan Devices ............................................................................................................ 374
CC-SG Clustering ............................................................................................................................ 374
Access to Infrastructure Services .................................................................................................. 375
PC Clients to CC-SG........................................................................................................................ 375
PC Clients to Nodes ....................................................................................................................... 376
CC-SG and Client for IPMI, iLO/RILOE, DRAC, RSA ........................................................................ 377
CC-SG and SNMP ........................................................................................................................... 377
CC-SG Internal Ports ...................................................................................................................... 378
CC-SG Access via NAT-enabled Firewall ........................................................................................ 378
RDP Access to Nodes ..................................................................................................................... 378
VNC Access to Nodes .................................................................................................................... 378
SSH Access to Nodes ..................................................................................................................... 378
Remote System Monitoring Port .................................................................................................. 379
Contents
xvi
User Group Privileges 380
SNMP Traps 389
CSV File Imports 391
Common CSV File Requirements .............................................................................................................. 391
Audit Trail Entries for Importing ............................................................................................................... 392
Troubleshoot CSV File Problems .............................................................................................................. 393
Troubleshooting 394
Security Options for KVM Target Connections on Mac/Safari ................................................................. 395
Troubleshooting or Known Issues in VKC and HKC .................................................................................. 395
Diagnostic Utilities 397
Memory Diagnostic .................................................................................................................................. 397
Debug Mode ............................................................................................................................................. 398
CC-SG Disk Monitoring ............................................................................................................................. 399
Two-Factor Authentication 402
Supported Environments for Two-Factor Authentication ........................................................................ 402
Two-Factor Authentication Setup Requirements ..................................................................................... 402
Dominion KX2/KX3 Dual Video Port Setup and Recommendations 403
Configuring and Using Dual Port Video in CC-SG...................................................................................... 404
Using VMware High Availability or Fault Tolerance with a CC-SG Virtual Appliance 406
FAQs 409
General FAQs ............................................................................................................................................ 416
Authentication FAQs ................................................................................................................................ 417
Security FAQs ........................................................................................................................................... 418
Accounting FAQs ...................................................................................................................................... 418
Performance FAQs .................................................................................................................................... 419
Grouping FAQs ......................................................................................................................................... 419
Interoperability FAQs ............................................................................................................................... 420
Authorization FAQs .................................................................................................................................. 421
Contents
xvii
User Experience FAQs .............................................................................................................................. 421
Licensing FAQs .......................................................................................................................................... 421
Keyboard Shortcuts 423
Naming Conventions 424
User Information ...................................................................................................................................... 424
Node Information ..................................................................................................................................... 424
Location Information ................................................................................................................................ 425
Contact Information ................................................................................................................................. 425
Service Accounts ...................................................................................................................................... 425
Device Information ................................................................................................................................... 425
Port Information ....................................................................................................................................... 426
Associations .............................................................................................................................................. 426
Administration .......................................................................................................................................... 427
Diagnostic Console Bootup Messages 428
Index 429
xviii
The following sections have changed or information has been added to the
CommandCenter Secure Gateway Administrators Help based on enhancements
and changes.
• Support for ServerTech PRO3X PDUs: Add a ServerTech PDU or ServerTech
PRO3X (on page 53)
• New MultiPlatform RDP client: Install MultiPlatform RDP Client (on page
128)
• Support for SSH Keys:
Configure User SSH Keys (on page 181)
Enable SSH Access (on page 287)
• Help with Upgrading: Fence Releases and Upgrade Paths (on page 311)
See the Release Notes for a more detailed explanation of the changes applied
to this version of the CommandCenter Secure Gateway.
What's New in the CC-SG Administrators
Help
1
The CommandCenter Secure Gateway (CC-SG) Administrators Guide offers
instructions for administering and maintaining your CC-SG.
This guide is intended for administrators who typically have all available
privileges.
Users who are not administrators should see Raritan's CommandCenter Secure
Gateway User Guide.
In This Chapter
Terminology/Acronyms ........................................................................................ 2
Client Browser Requirements ............................................................................... 4
Chapter 1
Introduction
Chapter 1: Introduction
2
Terminology/Acronyms
Terms and acronyms found in this document include:
Access Client - HTML-based client intended for use by normal access users who
need to access a node managed by CC-SG. The Access Client does not allow the
use of administration functions.
Admin Client - Java-based client for CC-SG useable by both normal access users
and administrators. It is the only client that permits administration.
Associations - relationships between categories, elements of a category, and
ports or devices or both. For example, if you want to associate the “Location”
category with a device, create associations before adding devices and ports in
CC-SG.
Category - a variable that contains a set of values or elements. An example of a
Category is Location, which may have elements such as “New York City,”
“Philadelphia,” or “Data Center 1.” When you add devices and ports to CC-SG,
you will associate this information with them. It is easier if you set up
associations correctly first, before adding devices and ports to them. Another
example of a Category is “OS Type,” which may have elements such as
“Windows” or “Unix” or “Linux.”
CIM (Computer Interface Module) - hardware used to connect a target server
and a Raritan device. Each target requires a CIM, except for the Dominion
KX101 V2, which is attached directly to one target and therefore does not
require a CIM. Target servers should be powered on and connected to CIMs,
and CIMs should be connected to the Raritan device BEFORE adding the device
and configuring ports in CC-SG. Otherwise, a blank CIM name will overwrite the
CC-SG port name. Servers must be rebooted after connecting to a CIM.
Device Group - defined group of devices that are accessible to a user. Device
groups are used when creating a policy to control access to the devices in the
group.
Devices - Raritan products such as Dominion KX III, SX II, and KX IV-101 that are
managed by CC-SG. These devices control the target servers and systems, or
"nodes" that are connected to them. Check the CC-SG Compatibility Matrix on
the Raritan Support web site for a list of supported devices.
Elements - values of a category. For example, the “New York City” element
belongs to the “Location” category, and the “Windows” element belongs to the
“OS Type” category.
Hostname - can be used if DNS server support is enabled. See About Network
Setup (on page 241).
The hostname and its Fully-Qualified Domain Name (FQDN = Hostname + Suffix)
cannot exceed 257 characters. It can consist of any number of components, as
long as they are separated by “.”.
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
Page is loading ...
/
